最新的CyberArk Sentry認證 PAM-SEN考試題庫

問題1

Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?

A. user.cred

B. psmpparms

C. psmgw.config

D. vault.ini

正確答案: B

問題2

Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

A. Server Key

B. Recovery Private Key

C. Recovery Public Key

D. Safe Key

正確答案: A

問題3

Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.
What is the most probable cause?

A. OpenSSH 7.8 or above is not installed.

B. A passphrase policy must be added.

C. The MFACaching parameter in the psmpparms file is not set to True.

D. MFA caching is not supported when the PSM for SSH is deployed with default settings.

正確答案: D

問題4

What is the purpose of the password Reconcile process?

A. To generate a new complex password.

B. To test that CyberArk is storing accurate credentials for accounts.

C. To change the password of an account according to organizationally defined password rules

D. To allow CyberArk to manage unknown or lost credentials.

正確答案: C

問題5

Which component must be installed before the first CPM installation?

A. PVWA

B. PSM

C. EPM

D. PTA

正確答案: D

問題6

You have been asked to limit a platform called "Windows_Servers" to safes called "WindowsDC1" and
"WindowsDC2". The platform must not be assigned to any other safe.
What is the correct way to accomplish this?

A. Edit the "Windows_Servers" platform, expand "Automatic Password Management", then select Options and modify "AllowedSafes" to be (Win*).

B. Edit the "Windows_Servers" platform, expand "Automatic Password Management", then select General and modify "AllowedSafes" to be (WindowsDC1)|(WindowsDC2).

C. Log in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category "WindowsServersAllowedSafes" and specify "WindowsDC1,WindowsDC2".

D. Edit the "WindowsDC1" and "WindowsDC2" safes through Safe Management, Add
"Windows_Servers" to the "AllowedPlatforms".

正確答案: B

問題7

What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?

A. PSMAdminConnect

B. PSMConnect

C. PSM

D. The credentials the end user retrieved from the vault

正確答案: B

問題8

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

A. It prompts for input parameters that will be used to pre-populate form fields in the installation wizard.

B. It verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.

C. It automatically installs the CPM, requiring no additional user input.

D. It allows you to install the CPM using a command line approach rather than using the installation wizard.

正確答案: B

問題9

What is a prerequisite step before installing the Vault on Windows 2019?

A. Check that the server IP address is correctly configured and that it is static

B. Configure the Kerberos authentication method on the default IIS Application pool

C. Install Microsoft Windows patch KB4014998

D. In the Network Connection properties, configure Preferred DNS Servers

正確答案: A

問題10

Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

A. PrivateArk Server

B. Windows Time service

C. PrivateArk Database

D. Windows Update service

正確答案: B

最新的CyberArk Sentry - PAM - PAM-SEN免費考試真題

最新更新

站內鏈接

聯系我們